heidisql-wine
The package downloads a portable Windows executable from the project's official domain (heidisql.com) for use with Wine; this is a legitimate source for the software, and the file is not executed directly on the host system.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a portable Windows executable from the project's official domain (heidisql.com) for use with Wine; this is a legitimate source for the software, and the file is not executed directly on the host system.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
"https://www.heidisql.com/builds/heidisql64.r${heidisqlrelease}.exe"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Nico <d3sox at protonmail dot com>
# Contributor: Liviu Cristian Mirea-Ghiban <liviu dot mirea at wecodepixels dot com>
heidisqlrelease=7320
shortpkgver=12.20
pkgname=heidisql-wine
pkgver=${shortpkgver}.0.${heidisqlrelease}
pkgrel=2
pkgdesc="A lightweight GUI for managing MySQL, PostgreSQL, and Microsoft SQL databases. This package uses the latest nightly build (64bit) on top of the portable version, and uses Wine."
arch=(any)
url="http://www.heidisql.com/"
license=('GPL')
depends=(bash wine)
makedepends=(unzip)
source=("https://github.com/HeidiSQL/HeidiSQL/releases/download/v${shortpkgver}/HeidiSQL_${shortpkgver}_64_Portable.zip"
"https://www.heidisql.com/builds/heidisql64.r${heidisqlrelease}.exe"
"${pkgname}.png"
"${pkgname}.desktop"
"${pkgname}.sh")
sha256sums=('d84742736e4508c206c28c58018bbd934319c941dc9d68ff4673737a3f4df731'
'2c1e8231f681a3a75f3fda65e679d86c0fa9a35294fa2c33f3e57f0dc3cacc82'
'd0f6c19b7aa4b7a6daa00b658a852f97d35dd98d2c31a2f4ea267527bf5cda15'
'07abdaeab2b5c30ed7b053cce5e42942cc32c56503439eff69fb21b57c522122'
'840acb31ca1de8d029e725fded1ac09df0314dea41da53f15f4cd3848e34bb00')
noextract=("HeidiSQL_${shortpkgver}_64_Portable.zip")
package() {
# Unzip files from the .zip file
install -d -m755 ${pkgdir}/usr/share/$pkgname
unzip "$srcdir/HeidiSQL_${shortpkgver}_64_Portable.zip" -d "$srcdir/unzipped"
# Overwrite with nightly build file
cp "$srcdir/heidisql64.r${heidisqlrelease}.exe" "$srcdir/unzipped/heidisql.exe"
# Install files
cp -ra "$srcdir/unzipped/"* "${pkgdir}/usr/share/${pkgname}"
# Set proper permissions
find "${pkgdir}/usr/share/${pkgname}" -type f -exec chmod 644 "{}" \;
find "${pkgdir}/usr/share/${pkgname}" -type d -exec chmod 755 "{}" \;
# Install the startup script
install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
# Install the icon
install -Dm644 "${srcdir}/${pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
# Install the .desktop
install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |